$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa File: 876582d6-fa70-3b03-9ce4-1d237ac385b7.roa (raw, json) Hash identifier: ssZNTAhG56I/dUCsQWExBJepNxsrJieRMslfpistcxo= Subject key identifier: 21:94:CE:04:8C:98:1C:D7:51:A4:6B:DF:27:C7:DE:1F:49:D5:0C:1F Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Certificate serial: 010D0C9F43285848424AD81FE0C6832914393E40 Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2607:28c0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d8:1f:e0:c6:83:29:14:39:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=79adfffc-4636-4079-a3e1-bcf9fc654943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:d1:3f:cb:94:09:3d:83:ee:c2:70:5c:6b: 81:9b:c9:a9:a6:3d:1e:5c:0f:8f:f7:1f:1e:e8:74: 68:59:59:af:6f:8f:ca:11:2e:77:8f:a8:63:ab:0f: 80:08:78:4f:c1:ea:14:a9:b5:a6:e4:1b:35:78:aa: 5c:07:5b:88:cc:3d:ef:07:e1:ab:40:06:3f:40:18: c8:3d:5e:6e:42:b4:0e:cb:83:77:ed:6b:ea:a4:dd: 75:f0:72:d6:6d:38:17:9e:bf:b1:e5:69:2f:bf:b2: 01:e6:61:0e:0d:47:b1:13:c4:4d:0f:9e:8c:b7:fc: 59:46:9c:4b:31:79:e1:6a:32:1e:2d:9a:4b:84:0e: 7d:0c:1a:05:91:77:3e:6a:17:9b:83:c4:50:bb:2f: 51:f9:59:12:46:94:0f:ae:7c:b0:33:b0:4c:3c:22: e9:e7:50:04:51:36:c5:93:19:2b:77:de:2a:c4:20: 58:f9:ee:0d:29:01:68:59:ad:35:09:93:0f:cf:60: a6:97:ec:88:17:14:fc:54:8c:a5:27:a8:31:65:78: 33:93:51:34:95:9e:88:e6:e1:f7:79:a7:35:47:7f: a3:2a:4c:c1:8c:dc:b0:7e:b9:16:cd:60:f7:16:e1: 03:64:53:1f:4f:8a:4f:de:63:42:62:d9:95:a2:52: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:94:CE:04:8C:98:1C:D7:51:A4:6B:DF:27:C7:DE:1F:49:D5:0C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl X509v3 Authority Key Identifier: keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer sbgp-ipAddrBlock: critical IPv6: 2607:28c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8b:56:95:4c:55:b1:14:a8:e3:1d:0c:33:44:93:58:be:72: 6b:f0:4e:a8:0d:ad:94:4c:87:d4:83:a1:95:d3:29:f0:28:69: 7d:8f:2d:25:f0:9f:c9:4d:6c:ee:a1:28:f0:2e:24:1b:b7:b4: 80:bd:5b:ae:2c:1e:91:7a:3d:07:db:c5:f8:44:60:ea:40:b2: 83:92:dc:c7:42:ac:55:3d:0b:4e:47:b5:1c:7f:08:30:07:ad: 8b:3b:a8:bf:09:48:9e:69:fe:c8:c2:32:ba:bf:bb:a0:ed:ae: 70:26:10:2b:33:62:3e:f0:92:40:85:22:9a:d9:7a:19:69:c9: 52:b7:a5:4d:ab:8c:f2:7e:f2:4f:d4:ab:60:40:9f:c8:46:3a: 88:16:6c:b8:6d:6c:b1:6c:91:c7:af:65:21:44:61:e8:80:76: 2b:5a:b4:0f:13:49:5e:fe:fe:de:6d:d0:f1:32:42:c9:86:dc: 76:bf:2a:1d:41:42:91:92:ed:55:bc:0b:a4:8d:60:05:b9:18: dc:5e:e8:15:b6:33:fc:9f:f9:bb:ba:2b:a1:aa:37:9b:0e:db: b4:7a:88:40:48:31:5c:06:2a:01:84:0e:e8:2a:ad:3c:75:f0: eb:c9:1a:1b:47:c9:01:53:a9:d2:dc:a8:3a:4f:14:b0:f2:ed: ed:79:85:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhCStgf4MaDKRQ5PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz YjU3MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk NzlhZGZmZmMtNDYzNi00MDc5LWEzZTEtYmNmOWZjNjU0OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru/RP8uUCT2D7sJwXGuBm8mppj0eXA+P9x8e 6HRoWVmvb4/KES53j6hjqw+ACHhPweoUqbWm5Bs1eKpcB1uIzD3vB+GrQAY/QBjI PV5uQrQOy4N37WvqpN118HLWbTgXnr+x5Wkvv7IB5mEODUexE8RND56Mt/xZRpxL MXnhajIeLZpLhA59DBoFkXc+ahebg8RQuy9R+VkSRpQPrnywM7BMPCLp51AEUTbF kxkrd94qxCBY+e4NKQFoWa01CZMPz2Cml+yIFxT8VIylJ6gxZXgzk1E0lZ6I5uH3 eac1R3+jKkzBjNywfrkWzWD3FuEDZFMfT4pP3mNCYtmVolI1NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCGUzgSMmBzXUaRr3yfH3h9J1QwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1 ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvODc2NTgyZDYtZmE3MC0z YjAzLTljZTQtMWQyMzdhYzM4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2 OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3 M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi MTQ4NzNiNTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgcowAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGotWlUxVsRSo4x0MM0STWL5ya/BOqA2tlEyH1IOhldMp8ChpfY8t JfCfyU1s7qEo8C4kG7e0gL1briwekXo9B9vF+ERg6kCyg5Lcx0KsVT0LTke1HH8I MAetizuovwlInmn+yMIyur+7oO2ucCYQKzNiPvCSQIUimtl6GWnJUrelTauM8n7y T9SrYECfyEY6iBZsuG1ssWyRx69lIURh6IB2K1q0DxNJXv7+3m3Q8TJCyYbcdr8q HUFCkZLtVbwLpI1gBbkY3F7oFbYz/J/5u7oroao3mw7btHqIQEgxXAYqAYQO6Cqt PHXw68kaG0fJAVOp0tyoOk8UsPLt7XmFHA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:49 2025 by rpki-client